Privacy Statement

Privacy Statement

Updated December 30, 2019

This privacy statement discloses the privacy practices for Dealer Spike, LLC and Bert's Mega Mall. Dealer Spike, LLC and Bert's Mega Mall promote the use of fair information practices. Because Dealer Spike, LLC and Bert's Mega Mall are committed to your privacy, we have agreed to disclose our information practices.

INFORMATION COLLECTION AND USE:

Dealer Spike, LLC is the sole owner of the information collected on this site. Dealer Spike, LLC and Bert's Mega Mall will not sell, share, or rent this information to others in ways different from what is disclosed in this statement. Dealer Spike, LLC and Bert's Mega Mall collect information from our users at several different points on the web site.

VEHICLE QUOTE REQUESTS:

In order to obtain a vehicle price quote, a user must first complete a Quote Request Form. A user is required to give their contact information (such as name, address, telephone number and e-mail address). This information is used to contact the user and provide the quote or other information that they have requested. It is optional for the user to provide financial information, but can be done so that Bert's Mega Mall can review and pre-qualify the user for financing if they are interested. All customer information obtained via the quote request form is encrypted for security purposes and stored on a secured server.

ORDERS:

Information is requested from the user on the e-Catalog order form. Here a user must provide contact information (like name and shipping address) and financial information (like credit card number, expiration date). This information is used for billing purposes and to fill customer's orders. If Bert's Mega Mall has trouble processing an order, this contact information is used to get in touch with the user. All customer information obtained via the order form is encrypted for security purposes and stored on a secured server.

COOKIES:

A cookie is a piece of data stored on the user's hard drive containing information about the user. Usage of a cookie is in no way linked to any personally identifiable information while on our site. Once the user closes their browser, the cookie simply terminates. For example, a cookie is used to store items during e-Catalog shopping so that a list of what you are ordering is maintained. If a user rejects the cookie, they may still use the site. The only drawback to this is that the user will be limited in some areas of our site. For example, the user, may not be able to use the e-Catalog shopping basket function on the site. Cookies can also enable us to track and target the interests of our users to enhance the experience on the site.

LOG FILES:

We use IP addresses to analyze trends, administer the site, track user's movement, and gather broad demographic and geographic information for aggregate use. IP addresses are not linked to personally identifiable information.

SHARING:

We may share demographic information with our partners and advertisers. This is generally not linked to any personal information that can identify any individual person. However, Dealer Spike, LLC and/or Bert's Mega Mall may send E-mails or mail about special offers at the Dealership or other offers or information that may be of interest to the user based on the information we collect. Bert's Mega Mall uses an outside company (such as UPS, USPS, Fed Ex. etc.) to ship orders, and a credit card processing company to bill users for goods and services. These companies do not to our knowledge, retain, share, store or use personally identifiable information for any secondary purposes.

We may partner with another party to provide specific services. When the user signs up for these services, we will share names, or other contact information that is necessary for the third party to provide these services. These parties are not allowed to use personally identifiable information except for the purpose of providing these services.

LINKS:

This web site contains links to other sites. Please be aware that Dealer Spike, LLC and Bert's Mega Mall are not responsible for the privacy practices of such other sites. We encourage our users to read the privacy statements of every web site that collects personally identifiable information. This privacy statement applies solely to information collected by this web site.

SURVEY AND CONTESTS:

From time to time, our site requests information from users via surveys or may offer contests. Participation in these surveys or contests is completely voluntary and the user therefore has a choice whether or not to disclose this information. Information requested may include contact information (such as name and shipping address) and demographic information (such as zip code and age level). Contact information will be used to notify the winners and award prizes. Survey information will be used for purposes of monitoring or improving the use and satisfaction of this site.

NOTIFICATION OF CHANGES:

If we decide to change our privacy policy, we will post those changes here so our users are always aware of what information we collect, how we use it, and under circumstances, if any, we disclose it.

This web site takes every precaution to protect our users' information. When users submit sensitive information via the web site, their information is protected both online and off-line.

When our quote request or order form asks users to enter sensitive information (such as credit card number and/or social security number), that information is encrypted and is protected with the best encryption software in the industry - SSL. While on a secure page, such as our order form, the lock icon on the bottom of Web browsers such as Netscape Navigator and Microsoft Internet Explorer becomes locked, as opposed to unlocked, or open, when you are just "surfing".

While we use SSL encryption to protect sensitive information online, we also do everything in our power to protect user-information off-line. All of our users' information, not just the sensitive information mentioned above, has restricted access at Dealer Spike, LLC and at the dealership. Only employees who need the information to perform a specific job (for example, order clerk, sales representative, or a customer service representative) are granted access to personally identifiable information. Access to the information is made via a password-protected site. Each time an employee needs to access information, they must enter their password to gain access to the information. Furthermore, employees are kept up-to-date on our security and privacy practices. Employees are periodically notified and/or reminded about the importance we place on privacy, and what they can do to ensure our customers' information is protected.

SUPPLEMENTATION OF INFORMATION:

In order for this web site to properly fulfill its obligation to our customers, it may be necessary for us to supplement the information we receive with information from third party sources.

For example, to determine if customers qualify for financing, the dealership may use their name and social security number to request a credit report or approval from a lending institution.

SITE AND SERVICE UPDATES:

Dealer Spike, LLC and Bert's Mega Mall may send the user site and service announcement updates which contain important information about the service. We communicate with the user to provide requested services and in regard to issues relating to their account via e-mail or phone.

CALIFORNIA CONSUMER PRIVACY ACT (CCPA)

SUPPLEMENTAL PRIVACY NOTICE FOR CALIFORNIA RESIDENTS:

This supplemental privacy notice gives California residents additional information required by the California Consumer Privacy Act (the CCPA).

The CCPA provides California residents with specific privacy rights, including the right to receive a privacy notice, the right to know what information we have collected about you during the past 12 months, and the right to know what categories of personal information we have shared with third parties. CCPA gives California residents the right to opt-out of having their personal information sold1. CCPA also gives California residents the right to request deletion of your personal information.

This notice provides information about the categories of information that we collect from California residents generally, the sources of the information, the purposes for which we use the information, and the categories of third parties to whom we disclose the information for business purposes.

If you are a California resident, you may exercise your rights or authorize another person to act on your behalf by contacting us in one of the following ways:

Phone: (626) 974-6600

Email: customerservice@bertsmegamall.com

In-person or in writing: 1151 N. Azusa Avenue, Covina, CA 91722

Please note that we may need to verify your identity before we can fulfill your request. If you are exercising rights on behalf of another person, please be prepared to provide proof that you have been designated as an authorized agent. Also, please understand that these rights are subject to some limitations, such as when we are retaining data to comply with our own legal obligations.

The CCPA provides California residents with specific privacy rights, including the right to receive a privacy notice, the right to know what information we have collected about you during the past 12 months, and the right to know what categories of personal information we have shared with third parties. CCPA gives California residents the right to opt-out of having their personal information sold. CCPA also gives California residents the right to request deletion of your personal information.

Personal information of children under 16 cannot be sold without affirmative consent. CDK Digital does NOT sell any personal information, including that of children under the age of 16.

Everyday Business Purposes encompasses the Business Purposes (as defined in the CCPA) and following related purposes for which personal information may be used:

• To provide the information, product or service requested by the individual or as reasonably expected given the context in which with the personal information was collected (such customer credentialing, providing customer service, personalization and preference management, providing product updates, bug fixes or recalls, and dispute resolution)
• For identity and credential management, including identity verification and authentication, system and technology administration
• To protect the security and integrity of systems, networks, applications and data, including detecting, analyzing and resolving security threats, and collaborating with cybersecurity centers, consortia and law enforcement about imminent threats
• For fraud detection and prevention
• For legal and regulatory compliance, including all uses and disclosures of personal information that are required by law or for reasonably needed for compliance with company policies and procedures, such as: anti-money laundering programs, security and incident response programs, intellectual property protection programs, and corporate ethics and compliance hotlines,
• For corporate audit, analysis and reporting,
• To enforce our contracts and to protect against injury, theft, legal liability, fraud or abuse, to protect people or property, including physical security programs
• To de-identify the data or create aggregated datasets, such as for consolidating reporting, research or analytics,
• To make back-up copies for business continuity and disaster recovery purposes, and
• For corporate governance, including mergers, acquisitions and divestitures.

CCPA RIGHT TO KNOW DISCLOSURES